Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/i10kFZuMi62iQJKS941gSb8tBL8.roa
File: i10kFZuMi62iQJKS941gSb8tBL8.roa (raw, json)
Hash identifier: lYZoZVZLzonR7uphIJ8jCcFjke4XoP3QR3NgeMXDylI=
Subject key identifier: 8B:5D:24:15:9B:8C:8B:AD:A2:40:92:92:F7:8D:60:49:BF:2D:04:BF
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 01857321E38687C72F61F3D0CFC7F500F2F2
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/i10kFZuMi62iQJKS941gSb8tBL8.roa
Signing time: Mon 02 Jan 2023 15:37:58 +0000
ROA not before: Mon 02 Jan 2023 15:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208339
IP address blocks: 45.143.204.0/23 maxlen: 23
45.143.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:e3:86:87:c7:2f:61:f3:d0:cf:c7:f5:00:f2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Jan 2 15:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b5d24159b8c8bada2409292f78d6049bf2d04bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:ec:5f:e3:00:25:21:91:bf:ba:56:0c:2d:
dd:a1:e4:ac:6f:3f:d3:d8:d4:52:82:a1:b8:53:81:
4d:81:a9:3a:ba:2c:78:59:25:9a:59:63:60:66:06:
e5:40:ea:75:a7:f8:9a:35:fe:08:bc:77:b5:24:e4:
da:24:97:93:4b:0c:0e:db:29:10:b3:8b:73:23:f8:
36:94:c8:7d:cb:00:48:1f:4c:d8:10:10:b3:84:7f:
fa:5e:34:43:46:94:50:64:4b:e1:33:c5:4f:6d:3b:
07:99:3d:06:0f:91:e6:99:7a:1a:2d:b2:2e:67:11:
f6:31:cb:88:ed:e9:12:ac:7f:97:8f:23:d5:50:c6:
92:9c:22:57:8c:6c:04:1b:94:25:54:2d:5a:d6:ef:
23:58:d9:29:c2:45:b2:18:bf:d4:b8:25:84:c9:76:
ea:ff:2d:84:ea:63:af:88:55:1c:fe:98:70:f2:18:
ff:d3:06:c9:09:ce:aa:40:6c:db:cf:30:d9:15:bb:
d5:70:23:60:3a:96:d1:c9:a9:eb:96:c1:4a:bc:20:
9e:4c:00:9c:71:bb:73:d3:9f:3f:84:e9:10:2a:8e:
4b:11:1f:58:3b:c8:35:dc:14:2f:84:fe:2b:d7:1b:
e9:dd:70:c3:73:e0:cb:d6:e7:44:a4:19:93:5a:d9:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:24:15:9B:8C:8B:AD:A2:40:92:92:F7:8D:60:49:BF:2D:04:BF
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/i10kFZuMi62iQJKS941gSb8tBL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:dd:a2:7e:33:13:e4:c6:c6:54:e4:8f:ec:00:86:33:81:26:
79:c6:72:a7:3f:56:f4:33:e2:cc:d6:fb:ab:50:d7:14:67:4b:
f8:bc:1b:02:11:93:09:cd:e0:25:7a:25:82:e8:01:64:c8:7e:
76:60:fc:56:65:39:07:92:c6:80:8b:50:cb:81:83:93:ef:e1:
7f:62:2a:94:38:ec:b3:36:69:34:c7:c7:45:0d:13:37:3b:6c:
ff:63:fb:f9:74:f2:39:c7:6b:6e:07:09:bf:58:f8:a3:9f:1f:
2b:d9:b2:66:93:ba:de:68:50:be:57:0d:05:9c:98:f4:e8:d9:
5d:ee:c6:f6:c1:4d:de:93:df:2b:fa:1d:fe:7a:1b:0e:4a:96:
4f:1f:1f:1e:48:44:16:27:a3:da:8c:86:d2:f3:10:f1:24:ae:
f9:0b:77:13:f1:db:e2:7e:44:0c:47:7d:58:1c:21:1d:50:30:
65:ea:c8:13:a1:aa:d1:e0:be:fa:ce:ce:f6:ca:4e:cf:c2:73:
62:84:20:82:8e:b2:13:97:c3:ab:aa:48:96:f0:2f:e9:88:60:
d6:c4:09:a6:2d:4d:2c:16:0c:28:5a:94:ec:17:ae:ee:88:a3:
0d:24:7d:a8:6f:e0:b8:4c:b8:13:9d:a9:0a:dc:8d:f1:b5:14:
2b:d9:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:21 2025 by rpki-client